Sigrid
Sigrid is a software portfolio platform for measuring software quality, security, and AI impact across systems.
What Sigrid is
Sigrid is a software portfolio platform for measuring software quality, security, and AI impact across systems. Sigrid Core covers maintainability, architecture and modernization, security, and open-source health. It presents portfolio KPIs and executive reports for boards, system analysis for architects, and code-level findings for developers. Its quality analysis uses ISO/IEC 25010, and SIG says it co-developed ISO/IEC 5338 for AI lifecycle management. Sigrid compares source code with a benchmark of more than 40,000 systems and more than 600 billion lines of code. It can be deployed in the cloud, on-premise, or locally when code must stay inside an organization. The tool reads source code without modifying or executing it. Integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, TeamCity, VS Code, JetBrains, and Mendix. Sigrid CI can block merges that do not meet quality standards and surface findings in pull requests. A free trial is listed; scan options are priced at €999 per scan, excluding VAT where stated.
Good
- Covers maintainability, architecture, security, and open-source health.
- Offers cloud, on-premise, and local deployment.
- Reads source code without modifying or executing it.
- CI can block merges that fail quality standards.
- Integrates with common code and development tools.
Watch out
- Pricing is listed for specific scans, not a subscription.
- Listed scan prices exclude VAT where stated.
- Technical Debt Scan results take five business days.
Who it suits
Sigrid suits organizations assessing quality and security across software portfolios, with different views for executives, architects, and developers. Local deployment may suit environments where source code cannot leave the building.
Verdict
Sigrid links portfolio-level reporting with code-level analysis and options for keeping code local. Its scan plans have different scope and turnaround details, so review which offering matches the systems and findings needed.
Plans and prices
From Sigrid's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Product Risk & Value Scan | €999, paid once | One product · results within 24 hours of validated upload · Fixed price (excluding VAT); no commitment beyond the scan |
| Security Scan | €999, paid once | Full portfolio · results within 24 hours of validated upload · Fixed price (excluding VAT); no commitment beyond the scan |
| Technical Debt Scan | €999, paid once | Up to 5 systems · results in 5 business days · optional 30-minute walkthrough · Fixed price; no subscription |
The facts
Each one read from Sigrid's own pages, with the date it was checked.
What it does
- Audience
- The platform presents executive reports and portfolio KPIs for boards, system analysis for architects, and code-level findings for developers.checked 4 Oct 2026
- Benchmark
- Sigrid Core compares source code against a benchmark of more than 40,000 systems and more than 600 billion lines of code.checked 4 Oct 2026
- CI
- Sigrid CI can block merges that fail quality standards and surface findings in pull requests.checked 4 Oct 2026
- Code handling
- Sigrid ingests source code read-only and does not modify it; analysis is performed without executing the code.checked 4 Oct 2026
- Core capabilities
- Sigrid Core covers maintainability, architecture and modernization, security, and open-source health.checked 4 Oct 2026
- Data protection
- SIG says company data is stored and processed in the European Union unless another location is agreed in writing, is not disclosed to third parties without written permission, and is encrypted in its data centers.checked 4 Oct 2026
- Deployment
- Sigrid is available as Cloud, On-Premise, or Local for environments where code cannot leave the building.checked 4 Oct 2026
- Integrations
- Listed integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, TeamCity, VS Code, JetBrains, and Mendix.checked 4 Oct 2026
- Purpose
- Sigrid measures software quality, security, and AI impact across software systems in a portfolio.checked 4 Oct 2026
- Security certifications
- SIG says it has SOC 2 Type I and Type II attestation reports and an ISO/IEC 27001 certificate issued by TÜV Nord.checked 4 Oct 2026
- Security testing and privacy
- SIG says a trusted third party conducts regular penetration tests and that it adheres to GDPR.checked 4 Oct 2026
- Standards
- Its software quality analysis uses ISO/IEC 25010, and the company says it co-developed ISO/IEC 5338 for AI lifecycle management.checked 4 Oct 2026
- Support
- SIG offers expert support and an optional 30-minute walkthrough call with the Technical Debt Quick Scan.checked 4 Oct 2026
The company
- Founded
- 2019checked 28 Sep 2026
- Headquarters
- Amsterdam, Netherlandschecked 28 Sep 2026
Alternatives to Sigrid
- 1
DeepSource
Free planWebAPILinuxmacOS8.0From $30 a month - 2
Qodana
Free planWebAPIExtensionLinux7.9From $5 a month - 3
CodeAnt AI
Free planWebAPIExtensionSelf-hosted7.5From $20 a month - 4
Impact Code Analysis
Free planWebAPIExtensionSelf-hosted7.3From $149 a month - 5
Gitar
Free planWebAPISelf-hosted7.2From $20 a month - 6
Qlty Cloud
Free planWebAPIExtensionLinux7.2From $20 a month